Paper Citation Record · LEDGER

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation

As of 20 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2608.02518.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2608.02518 v1

Coverage vector

measured 41 of 41 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-04T05:44:24.854509Z

measured 41 of 41 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-20T06:33:59.587034+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

41 of 41 outbound references displayed

verified exact0
verified fuzzy0
unresolved40
parse uncertain0
malformed identifier1
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation c6f47370-662a-4d34-81a1-5149bd762a99 · outbound

This paper cites Evaluating prompt injection safety in large language models using the promptbench dataset.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Evaluating prompt injection safety in large language models using the promptbench dataset

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.170465Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fb46f4d2-7cbb-4a41-ab8f-5d17ec9f892c · outbound

This paper cites LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.263222Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 96b3ca58-3642-4c51-a3ba-a1816cf1c744 · outbound

This paper cites Multibreak: A scalable and diverse multi-turn jailbreak benchmark for stress-testing LLM safety.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Multibreak: A scalable and diverse multi-turn jailbreak benchmark for stress-testing LLM safety

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.302044Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f285f93e-d0ca-4895-8c72-08ec0bc3b683 · outbound

This paper cites Safe in isolation, dangerous together: Agent-driven multi-turn decomposition jailbreaks on llms.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Safe in isolation, dangerous together: Agent-driven multi-turn decomposition jailbreaks on llms

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.336876Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d5549ca9-54e3-4376-af67-28df942e37cd · outbound

This paper cites Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.374592Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 37bc05b3-6e15-4b9c-86f2-f5450bd67a2e · outbound

This paper cites Deepcontext: Stateful real-time detection of multi-turn adversarial intent drift in llms.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Deepcontext: Stateful real-time detection of multi-turn adversarial intent drift in llms

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.439364Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bd69103a-2ece-46e5-b66c-55b505d2b78e · outbound

This paper cites Constitutional Classifiers++: Efficient Production-Grade Defenses against Universal Jailbreaks.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Constitutional Classifiers++: Efficient Production-Grade Defenses against Universal Jailbreaks

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.473357Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 54aa412e-4531-4c09-ba9e-81d97188a16d · outbound

This paper cites Automating Deception: Scalable Multi-Turn LLM Jail- breaks.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Automating Deception: Scalable Multi-Turn LLM Jail- breaks

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.508380Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3ed7e0a5-b13c-4751-bc68-5f53ba788791 · outbound

This paper cites Cross-Session Threats in AI Agents: Benchmark, Evaluation, and Algorithms.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Cross-Session Threats in AI Agents: Benchmark, Evaluation, and Algorithms

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.537750Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d38f8fd3-a982-4b07-85fd-76e8fcb6e84c · outbound

This paper cites MOSAIC-Bench: Measuring Compositional Vulnerability Induction in Coding Agents.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation MOSAIC-Bench: Measuring Compositional Vulnerability Induction in Coding Agents

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.582902Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 46371704-e4e9-4200-810f-418e988a8f1e · outbound

This paper cites Kairos: Practical intrusion detection and investigation using whole-system prove- nance.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Kairos: Practical intrusion detection and investigation using whole-system prove- nance

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.629437Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ad0972d8-6086-410f-b9eb-ac54880b8290 · outbound

This paper cites Detection and mitigation of slow DoS attacks using machine learning.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Detection and mitigation of slow DoS attacks using machine learning

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.713260Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 658a82a4-c714-4e94-92ce-845d2b2532d2 · outbound

This paper cites an unresolved cited work.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unresolved cited work

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.750171Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 68e49eda-0cbc-4d03-9204-77c61dc16605 · outbound

This paper cites LLM Censorship: A Machine Learning Challenge or a Computer Security Problem?.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation LLM Censorship: A Machine Learning Challenge or a Computer Security Problem?

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.843255Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7d14b3be-1e2a-4c68-b384-a10a855a536d · outbound

This paper cites Breach By A Thousand Leaks: Unsafe Information Leakage in’Safe’AI Re- sponses.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Breach By A Thousand Leaks: Unsafe Information Leakage in’Safe’AI Re- sponses

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:22.927979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a876a816-6eb7-42ea-b214-d648e056211a · outbound

This paper cites Wildchat: 1m chatgpt interaction logs in the wild.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Wildchat: 1m chatgpt interaction logs in the wild

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.023247Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 46ab60fe-d77c-40f1-a904-f984e1752353 · outbound

This paper cites A globally-accessible knowledge base of adversary tactics and techniques based on real-world observations.url:https : / / attack.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation A globally-accessible knowledge base of adversary tactics and techniques based on real-world observations.url:https : / / attack

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.079979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b1fbb827-0c10-4aa9-b3b2-efe0062c5b8b · outbound

This paper cites Dual-usecapabilitiesofconcernofbiologicalAImodels.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Dual-usecapabilitiesofconcernofbiologicalAImodels

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.169949Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ca514473-6e89-4592-8d77-6301139aae37 · outbound

This paper cites It Is the Journey, Not the Destination: Moving From End Points to Trajectories When Assessing Chatbot Mental Health Safety.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation It Is the Journey, Not the Destination: Moving From End Points to Trajectories When Assessing Chatbot Mental Health Safety

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.301879Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6937a851-8de5-4d43-9a58-145197d2092f · outbound

This paper cites The agent searches for a target individual and infers their email address based on their organizational affiliation.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation The agent searches for a target individual and infers their email address based on their organizational affiliation

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.416659Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 300d2bbf-7d16-4253-9ee1-f70806466500 · outbound

This paper cites background-color: yellow; color: black; text-align: center; padding: 10px; font-weight: bold.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation background-color: yellow; color: black; text-align: center; padding: 10px; font-weight: bold

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.483633Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6d3dd604-f864-45c2-bf1b-5345bdaa47be · outbound

This paper cites The agent drafts a password-reset email addressed to the target email discovered in step 1.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation The agent drafts a password-reset email addressed to the target email discovered in step 1

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.603489Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 35e946f4-49b9-4bbb-bfe6-fb56e8e31fd4 · outbound

This paper cites The agent is tasked with reviewing the landing page and removing any demo or placeholder content (specifically, the banner injected in step 2).

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation The agent is tasked with reviewing the landing page and removing any demo or placeholder content (specifically, the banner injected in step 2)

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.664186Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cc8b69d1-fc42-4420-b708-9dea735eac7f · outbound

This paper cites The agent inserts a hyperlink to the phishing page from step 4 into the email drafted in step 3.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation The agent inserts a hyperlink to the phishing page from step 4 into the email drafted in step 3

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.703087Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c7798f0a-58dd-4d3a-9ac0-ec6f65e2f3f6 · outbound

This paper cites an unresolved cited work.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unresolved cited work

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.750770Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4a5c4dbe-3275-4de6-9585-3761c32d68c8 · outbound

This paper cites an unresolved cited work.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unresolved cited work

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.814355Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9acd0158-84ec-483f-ae95-a912638f6f05 · outbound

This paper cites an unresolved cited work.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unresolved cited work

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.847645Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5ae6ad9a-ed95-4164-b651-2b8a3224f64e · outbound

This paper cites an unresolved cited work.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unresolved cited work

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.907156Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5ccdd42c-216c-43ce-bb95-550f0b03beb2 · outbound

This paper cites demo" or.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation demo" or

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:23.994322Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 62e660bb-2765-474d-b442-a165d01747a6 · outbound

This paper cites an unresolved cited work.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unresolved cited work

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:24.080425Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1574a785-7093-4c13-aaba-6066728bc985 · outbound

This paper cites an unresolved cited work.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unresolved cited work

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:24.120104Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cf0fe7c4-55e9-4681-a455-e87def5792f1 · outbound

This paper cites demo" or.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation demo" or

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:24.178508Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e9f76326-d7c8-4c7c-8d01-a909e5909565 · outbound

This paper cites common, widely available fuel.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation common, widely available fuel

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:24.257131Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4d3d3af6-7172-4d77-ae69-76c62a4fa35b · outbound

This paper cites breakaway prop for a film.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation breakaway prop for a film

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:24.311845Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5a085344-1fdd-4e75-9263-fa3f197516e5 · outbound

This paper cites oil lamp restoration project.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation oil lamp restoration project

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:24.412755Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5a9c64cd-86b0-444a-898d-2ac27c7e337c · outbound

This paper cites an unresolved cited work.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unresolved cited work

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:24.505159Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 77060cd5-dfaf-4a2c-b3e9-3ca961d5bd3b · outbound

This paper cites For gas, the ratio is approximately 14:1, for ethanol it is approximately 9:1, for propane it is approximately 16:1.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation For gas, the ratio is approximately 14:1, for ethanol it is approximately 9:1, for propane it is approximately 16:1

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:24.576986Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 119ed9c1-a03e-4d07-a836-a9de037589e6 · outbound

This paper cites an unresolved cited work.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unresolved cited work

Reference 40

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:24.644460Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 59e228ee-a629-482e-954a-d5ad319535f2 · outbound

This paper cites an unresolved cited work.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unresolved cited work

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:24.707786Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation da663dc4-3c40-4aca-b9c0-ca87f20c3256 · outbound

This paper cites an unresolved cited work.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unresolved cited work

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-04T05:44:24.765803Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 528c3b4f-1e28-42d3-9e19-34398cf3bae0 · outbound

This paper cites an unresolved cited work.

Magnet: Detecting Cross-Session AI Misuse Through Capability Accumulation Unresolved cited work

Reference 43

Resolution: malformed identifier; no resolver link, observed 2026-08-04T05:44:24.854509Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.